JEWETT CAMERON TRADING CO LTD 10-K Cybersecurity GRC - 2024-11-20

Page last updated on November 20, 2024

JEWETT CAMERON TRADING CO LTD reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-11-20 16:05:17 EST.

Filings

10-K filed on 2024-11-20

JEWETT CAMERON TRADING CO LTD filed a 10-K at 2024-11-20 16:05:17 EST
Accession Number: 0001079973-24-001598

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. CYBERSECURITY Risk Management and Strategy We currently manage our cybersecurity risk through our IT consultants in a variety of practices that are applicable to all users of our information technology and information assets, including our officers, directors, employees, vendors and contractors. Our cyber risk management programs are designed to identify, assess, manage, mitigate, and respond to cybersecurity threats. We utilize a combination of technology and active monitoring that are integrated within our enterprise risk management network system to promote security awareness and prevent security incidents that are consistent with recognized standards and practices for information technology and cyber security. Our process for addressing risk aligns with industry standards as outlined in the NIST Cybersecurity Framework and NIST Risk Management Framework. The performance and effectiveness of our cybersecurity program are also tested on a regular schedule by outside consulting third-party experts. We have not experienced any material cybersecurity incidents or identified any material cybersecurity threats that have affected or are reasonably likely to materially affect us, our business strategy, results of operations or financial condition. Our Chief Financial Officer is responsible for assessing and managing our cyber risk management program and informs senior management regarding the prevention, detection, mitigation, and remediation of cybersecurity incidents. Governance The Audit Committee of the Board of Directors is responsible for overseeing risks related to cybersecurity. Our Chief Executive Officer and Chief Financial Officer are responsible for assessing and managing risks and incidents relating to cybersecurity threats. They report any material findings and recommendations, if any, to the Audit Committee and the Board of Directors. 11

Company Information